SSO Setup: G-Suite Configuration for ConveyIQ

This topic provides the steps required to configure Google SSO for ConveyIQ.

It includes the following sections:

• Features
• Requirements
• Configuration Steps

Features

The following SSO features are supported:

Requirements

Connecting ConveyIQ to G-Suite requires configuring a Project in the Google API Console to obtain OAuth 2.0 credentials. The credentials are required to Configure the OpenID Connector by submitting these credentials through a self-service flow provided by ConveyIQ.

Configuration Steps

The following steps need to be completed to enable Google SSO:

• Create a Project and obtain credentials in the Google API Console
• Configure the OpenID Connector in the ConveyIQ Application

Step 1: Create a Project and obtain credentials in the Google API Console:

1. Sign in to the Google API Console https://console.developers.google.com/projectselector2/apis/dashboard
2. Name the project, for example,ConveyIQ Google Auth
3. Select the Organization that includes all users who need sign-in enabled for ConveyIQ
4. Select the Location.
5. Click Create.
6. Open the Credentials tab.
7. From the Create credentials dropdown select OAuth client ID
8. Click Configureconsent screen.
9. Choose Application type: Internal
10. Name the application: ConveyIQ by Entelo
11. Uploading of the logo is optional– if you would like to do so, contact Entelo support for the image if not already provided.
12. Under Authorized domains add conveyiq.com
13. Click Save.
14. Choose Application Type: Web application
15. Name the OAuth ClientID by any preferred default name
16. Under the Authorized redirect, URIs field enter https://identityprovider.na.conveyiq.com/session/oidc/authorization_code
17. Click Save.

Note: Leave the page open because you will need the Client ID and Client Secret for the next step.

Step 2: Configure the OpenID Connector in the ConveyIQ Application

1. Look out for an email from Entelo with the subject line: ConveyIQ - OpenID Connect Configuration.

   Note: If you have not received an email yet, please reach out to your Entelo CSM contact or the support team.

2. In the email click the link Configuration URL.
3. On the Configuration step enter the:
   • Domain
   • Client ID
   • Client Secret NOTE: The Client ID and Secret can be found on the General Settings of the ConveyIQ by Entelo application created in step 1.
4. Click Update.

At this point all should be configured and the following is expected to work: Active users in the ConveyIQ application should be able to sign in using Google.